Perimetrical Back to Home
Legal Documentation

Privacy Policy

We ask that you carefully read this Privacy Policy, which describes how we use the data you provide to us, always in accordance with the requirements of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of April 27, 2016 (GDPR), Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights, and other applicable matching regulations. Our goal is transparency in the information provided for its proper understanding by you as a user. However, if you have any doubts after reading it, you can always contact us through any of the communication channels made available to you and we will clarify them.

I. DATA CONTROLLER

Contact details of the controller: The controller of the website is TRANSPARENT EDGE SERVICES, S.L. (hereinafter THE DATA CONTROLLER) with VAT number B85363141 and address at C/ Cedaceros 11, 6ºC (28014) Madrid, which will act as the Data Controller regarding the personal data that the user registers on the website.

Data Protection contact details: you can contact us at the postal address indicated above, or by phone at 910916419 or via email at dpo@transparentedge.eu.

DPO contact details: You can also contact our Data Protection Officer directly at the address dpo@transparentedge.eu.

II. PRINCIPLES ACCORDING TO THE EUROPEAN DATA PROTECTION REGULATION

We commit to processing the personal data provided in accordance with the following principles set out in the General Data Protection Regulation (GDPR):

  • Legality: We will only collect your personal data for specified, explicit, and legitimate purposes, and we will not process your personal data in a way that is incompatible with those purposes.
  • Lawfulness: According to Article 6 of the GDPR, your personal data will be managed provided that you express your explicit consent for the processing of such data as a form of externalizing your free and informed will and consent. Your personal data may be necessary to formalize a contract, agreement or service to which the data subject is a party, to comply with legal obligations, to protect the vital interests of the data subject and another natural person, to perform a task carried out in the public interest or in the exercise of official authority vested in the controller, or for the legitimate interests pursued by the controller provided they do not override the fundamental rights and freedoms of the data subject or the protection of their personal data.
  • Loyalty and transparency: According to Article 5 of the GDPR, as a manifestation of transparency, the data subject is informed of the existence of the processing operation and its purposes.
  • Data minimization: We limit the collection of personal data to what is strictly relevant and necessary for the purposes for which they have been collected.
  • Purpose limitation: We will only collect your personal data for specified, explicit, and legitimate purposes, and maintain them in the way we process them.
  • Accuracy: We will keep your personal data accurate and up to date.
  • Data Security: We apply the appropriate technical and organizational measures to ensure an appropriate level of security addressing the risks and nature of the data in order to prevent them from being disclosed or accessed by unauthorized personnel, or against any loss or alteration. Ultimately, any form of unlawful processing.
  • Access and Rectification: Anyone who, having given their consent for data collection, wishes to request any management regarding the processing, is recognized and may exercise: the right of access, rectification, objection, deletion, limitation of processing, portability, and not to be subject to individualized decisions. Their exercise will be free of charge, and such request will be addressed within one month, extendable for another two months due to exceptional circumstances such as the number of requests, complexity, or other similar circumstances. Point 15 of this document provides information on how to exercise these rights and the means and channels through which we will fulfill your request.
  • Principle of limitation of the retention period: The data will be kept for the necessary time and for the purposes of the processing without undue delay, during which the users' and clients' own data will be available to them upon request.

III. USER CONSENT

It will be understood that the user accepts the established conditions from the moment they provide their contact data through any of the channels made available on the page, in particular through the contact form.

The data collected, principally both name and email, are adequate, relevant, and not excessive in relation to the specific purposes of providing the information requested by the user. Their specific purpose is to respond to user requests for information about the company's services.

Notwithstanding the above, we must inform you that the consent given may be revoked at any time, and at that moment we will stop using them for any purpose not related to the provision of services, keeping them blocked for the minimum indispensable time to respond to possible legal liabilities.

IV. WHAT PERSONAL DATA DO WE PROCESS?

The data we will process from you for the legitimate purposes explained below are the following:

Data necessary to respond to information requests:

  • Name
  • Email address
  • Company
  • Phone
  • IP

V. PURPOSES OF DATA PROCESSING

For what purpose do we process your personal data?

To fulfill our objectives, we process data for the following purposes:

  • To respond to user information requests regarding the services provided by the company.
  • In case of contracting these services, for the proper administrative, accounting, and tax management of the client.

VI. HOW LONG WILL WE KEEP YOUR DATA?

The retention period for personal data will vary depending on the service provided and the legal basis of the consent given by the user. In principle, they will be kept as long as you remain a client of the company.

However, apart from the above, without prejudice to ceasing to use your data to provide the service or to send you any type of commercial communication, by legal obligation we will keep your data blocked during the limitation periods for obligations that may have arisen from the processing and/or the applicable legal periods, making them available to competent authorities to address possible liabilities arising from the processing.

Blocking of data, according to Article 17.3 GDPR, is understood as the right of "retention" as an exception to the obligation of deletion. This means the data will not be used or accessible to anyone, and will only be used in the event of any legal requirement or claim for liabilities related to them. After the legal limitation period in each case, they will be definitively deleted.

VII. LEGITIMATION

We process your data on the legal basis of your consent. In any case, you will have full rights over your personal data and its use, and you may exercise them at any time.

The collection of certain minimum information is, as mentioned, mandatory to provide you with the appropriate service, so the collected data are relevant and in no case excessive, as no data is requested that is not necessary for the established purposes.

VIII. RECIPIENTS

To whom do we transfer your data?

The collected data will not be transferred without your express authorization. In the event that certain providers whose services must be contracted require such transfer, the corresponding data access agreements will be signed within the framework of Article 28 of the GDPR.

Apart from the above, the DATA CONTROLLER will not transfer your data, except to competent Public Bodies, Tax Agency, State Security Forces and Corps, Judges and Courts, when legally obliged to provide them.

IX. DATA PROTECTION RIGHTS

RIGHT OF ACCESS

Article 15 of the GDPR recognizes the right of the data subject to know whether their personal data is being processed or not and the purposes of the processing, categories of data, recipients, origin of the data, retention period, and criteria to determine that period. Thus, the data controller will provide a copy of the personal data being processed in electronic format upon submission of the request.

Likewise, they may request the controller: rectification, deletion, or limitation of data and processing.

To facilitate the user's exercise of this right, we provide via the following link the form to be filled out for their request:
https://www.aepd.es/media/formularios/formulario-derecho-de-acceso.pdf

RIGHT TO RECTIFICATION AND DELETION

Articles 16 and 17 of the GDPR establish regarding rectification and deletion of personal data that the client or user may request the rectification of their personal data if they consider them inaccurate or to have them completed or deleted if they are no longer necessary for the purposes for which they were collected and processed.

To facilitate the user's exercise of this right, we provide via the following links the forms to be filled out for their request:
https://www.aepd.es/media/formularios/formulario-derecho-de-rectificacion.pdf
https://www.aepd.es/media/formularios/formulario-derecho-de-supresion.pdf

RIGHT TO LIMITATION OF PROCESSING

The data subject shall have the right to obtain from the controller restriction of processing where they contest the accuracy of the personal data. That is, the data may only be processed, with the exception of storage, with the data subject's consent, for the establishment, exercise or defense of legal claims, for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State. Furthermore, they will be informed by the controller before the restriction of processing is lifted.

To facilitate the user's exercise of this right, we provide via the following link the form to be filled out for their request:
https://www.aepd.es/media/formularios/formulario-derecho-de-limitacion.pdf

RIGHT TO DATA PORTABILITY

Article 20 of the GDPR recognizes the right of the data subject to receive the personal data concerning them, that is, it is transmitted directly from controller to controller where technically feasible, in a structured, commonly used and machine-readable format without hindrance from the controller to which the personal data have been provided, where consent was expressly externalized or a contract is involved.

To facilitate the user's exercise of this right, we provide via the following link the form to be filled out for their request:
https://www.aepd.es/media/formularios/formulario-derecho-de-acceso.pdf

How can rights be exercised?

We inform you that you can exercise the indicated rights by writing to the Controller at the indicated address C/ Cedaceros 11, 6ºC (28014) Madrid, or to the email address dpo@transparentedge.eu.

We also remind you that you can object to the sending of commercial communications by any means and at any time, by sending an email to the aforementioned address.

If you consider that your request has not been properly addressed or your data is not being handled properly, you can direct your complaints to the Spanish Data Protection Agency (AEPD), the supervisory authority in this matter in Spain.

X. SECURITY LEVEL

THE DATA CONTROLLER will implement the necessary technical and organizational security measures to guarantee the security of personal data in accordance with the provisions of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of April 27, 2016 (GDPR), thereby avoiding their loss, alteration, and unauthorized access.

The user is responsible for not transferring their account data to third parties, so that it is not accessible by unauthorized persons. Furthermore, the DATA CONTROLLER guarantees that the security measures adopted regarding your account also comply with data protection security standards.

In any case, and if despite complying with all necessary security measures, the website suffers a security breach that may affect your legitimate interests or rights, the DATA CONTROLLER commits to reporting within a maximum of 72 hours to the Supervisory Authority, in this case the Spanish Data Protection Agency, and to all users who may have been affected.

XI. INTERNATIONAL DATA TRANSFERS

An International Data Transfer is understood as the communication of your personal data to countries located outside the European Union, and more specifically outside the European Economic Area (EEA). There are exceptions for countries outside this European area that are not considered an international transfer as they are recipient countries that the European Data Protection Commission considers adequate for complying with European data protection standards.

THE DATA CONTROLLER does not currently contract the services of technological providers located outside the European Economic Area ("EEA"). In any case, given its activity, it may be necessary to transfer essential data within the framework of the services provided for their correct execution, such transfer being essential for the successful completion of the service. In some cases, depending on the type of service contracted by the user, an international data transfer may be necessary. Some countries outside the EEA are recognized by the European Commission as providing an adequate level of data protection according to EEA standards.

In the event that transfers are made to countries not considered adequate by the European Commission, the DATA CONTROLLER will sign contracts, guarantees, and safeguards necessary to preserve your privacy.

For more information on your privacy safeguards, you can contact the Controller at dpo@transparentedge.eu or at the postal address indicated above.

XII. MINORS

The minimum age, as set out in Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights, to authorize the processing of data is 14 years old.

However, aside from the above, in the case of minors under 18 years of age, contracting services will require the prior consent of their parents or guardians.

THE DATA CONTROLLER reserves the right to take all possible measures to verify the age of the users but cannot be held responsible for any breach in this regard. However, if the controller has the slightest doubt about the user's age, they may restrict access and not provide the keys for the creation of the registered user account, or proceed to cancel said account if it has already been created.

XIII. CONFIDENTIALITY

Any personal data that may be collected will be treated with absolute confidentiality, and we commit to keeping it secret, except for its use and transfer within the framework of the services provided, which you accept from the moment you register, and guaranteeing the duty to store them by adopting all necessary measures to prevent their alteration, loss, and unauthorized processing or access, in accordance with applicable legislation.

XIV. THIRD-PARTY PERSONAL DATA MANAGED BY YOU

If you, as a client, use any of our products and/or services to store, transmit or process third-party personal data on our systems, you will be solely responsible for managing, processing, guaranteeing, and protecting this personal data. Clients are also responsible for encrypting and restricting access to them.

Our relationship is exclusively with our clients, and we do not assume any responsibility regarding this third-party data.

Likewise, our clients are responsible for complying with the applicable legal requirements regarding the content hosted or managed by them through our systems. Thus, in the event of a security incident involving unauthorized access by third parties to personal data managed by you, TRANSPARENT EDGE SERVICES SL cannot be held responsible under any circumstances, neither for potential claims from affected third parties nor for any sanctioning procedures by any Supervisory Authority.

XV. MODIFICATION OF THE PRIVACY POLICY

THE DATA CONTROLLER reserves the right to modify its Privacy Policy, according to its own criteria, or motivated especially by legislative, jurisprudential, or doctrinal changes from the Spanish Data Protection Agency. Therefore, we ask that you consult it from time to time so that you are informed at all times.

Last revision date: August 27, 2025

© 2026 Transparent Edge S.L. — Perimetrical is a product of Transparent Edge.